Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownTOTOLINK a3002ru Improper Input ValidationPatch nowKEVEPSS 1.55%Feb 5, 2024
- UnknownCitrix ADC and Citrix Gateway Root Administrator (nsroot) Privilege EscalationPatch nowKEVEPSS 1.31%Jan 31, 2024
- Unknownhitron lguvr-16h_firmware Improper Input ValidationPatch nowKEVEPSS 0.50%Jan 30, 2024
- Unknownhitron lguvr-8h_firmware Improper Input ValidationPatch nowKEVEPSS 0.50%Jan 30, 2024
- Unknownhitron lguvr-4h_firmware Improper Input ValidationPatch nowKEVEPSS 0.50%Jan 30, 2024
- Unknownhitron hvr-16781_firmware Improper Input ValidationPatch nowKEVEPSS 0.50%Jan 30, 2024
- Unknownhitron hvr-8781_firmware Improper Input ValidationPatch nowKEVEPSS 0.50%Jan 30, 2024
- Unknownhitron hvr-4781_firmware Improper Input ValidationPatch nowKEVEPSS 0.56%Jan 30, 2024
- Unknowncookieinformation wp-gdpr-compliance Missing AuthorizationPatch nowKEVEPSS 1.46%Jan 29, 2024
- UnknownFortra GoAnywhere MFT Direct Request ('Forced Browsing')Patch nowKEVEPSS 95.09%Jan 25, 2024
- Unknownrevive-adserver revive_adserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 6.98%Jan 22, 2024
- UnknownLinksys re6500_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 32.94%Jan 22, 2024
- UnknownWestern Digital my_cloud_pr4100_firmware Improper AuthenticationPatch nowKEVEPSS 73.40%Jan 22, 2024
- Unknowncodeastrology woo_product_table Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 25.94%Jan 21, 2024
- Unknownopennetadmin opennetadmin Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 6.51%Jan 13, 2024
- Critical9.1Ivanti Connect Secure and Policy Secure Command Injection VulnerabilityPatch nowKEVEPSS 100.00%Jan 10, 2024
- UnknownZoho manageengine_opmanager Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 66.35%Jan 6, 2024
- Unknownlinknet-usa lw-n605r_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 42.66%Jan 3, 2024
- Unknowncambiumnetworks cnpilot_r190v_firmware Active Debug CodePatch nowKEVEPSS 32.36%Jan 3, 2024
- Unknowndaan omgf Missing AuthorizationPatch nowKEVEPSS 0.48%Jan 2, 2024
- Unknownsitemap_project sitemap Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 11.42%Jan 2, 2024
- Unknownmidasolutions eframework Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 98.24%Dec 25, 2023
- UnknownrConfig rConfig Improper Privilege ManagementPatch nowKEVEPSS 76.85%Dec 19, 2023
- UnknownWordPress Social Login and Register plugin for WordPress Authentication BypassPatch nowKEVEPSS 46.24%Dec 18, 2023
- UnknownKaseya Virtual System/Server Administrator (VSA) URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 10.32%Dec 15, 2023
Sort